Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e203332363638.roa
File:                     3137322e38322e38382e302f32342d3234203d3e203332363638.roa (raw, json)
Hash identifier:          Qa0ID4840OCh1dloaKbQVEWudfaST/mGDfsLO8cmqHI=
Subject key identifier:   2F:7D:F5:76:8A:A4:70:CC:F7:4F:52:EE:2D:70:33:90:CB:E1:7A:29
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       18740F3187CCED118E235F6CD649389741432560
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e203332363638.roa
Signing time:             Tue 20 Aug 2024 17:20:07 +0000
ROA not before:           Tue 20 Aug 2024 17:15:07 +0000
ROA not after:            Tue 19 Aug 2025 17:20:07 +0000
asID:                     32668
IP address blocks:        172.82.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 03:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:74:0f:31:87:cc:ed:11:8e:23:5f:6c:d6:49:38:97:41:43:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Aug 20 17:15:07 2024 GMT
            Not After : Aug 19 17:20:07 2025 GMT
        Subject: CN=2F7DF5768AA470CCF74F52EE2D703390CBE17A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:85:f7:66:db:da:85:2e:4c:a2:2a:0a:4f:
                    34:96:9a:c4:da:f0:b1:9f:62:36:62:05:c9:c0:fc:
                    8b:b3:88:3d:20:de:37:d7:2c:c3:cb:58:26:79:bf:
                    fd:55:40:36:30:e3:8e:42:26:d7:00:8a:68:1f:5f:
                    f2:14:e3:94:12:07:ab:43:c7:19:e9:78:1a:dc:b6:
                    db:5d:f7:8f:59:ea:d8:f7:f5:36:a5:47:70:8b:0e:
                    97:8e:68:68:de:7a:40:57:46:01:ff:51:c2:79:7e:
                    90:37:8e:59:d2:c8:a3:80:73:1f:0b:3f:82:1f:09:
                    6c:e2:8a:0b:39:84:70:4e:13:5f:94:99:42:63:a5:
                    e3:dc:6b:eb:90:9d:f4:3a:15:cb:f6:57:3f:39:09:
                    1f:e4:bf:a4:6e:5e:e8:17:7f:7d:c1:f5:3f:36:05:
                    da:b9:29:11:47:23:80:34:37:9b:f0:36:de:5d:cd:
                    e2:05:f3:93:33:31:36:7c:00:31:7f:ef:dc:dd:bc:
                    4f:49:36:74:a2:73:29:50:a1:c2:a3:45:46:27:91:
                    85:83:17:6f:c4:08:13:bf:b0:93:77:c4:54:07:60:
                    f8:b3:91:74:bd:9c:8f:b2:53:58:11:36:dc:fe:23:
                    6a:33:29:d7:63:bb:c2:0a:82:8a:82:81:4c:18:56:
                    66:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7D:F5:76:8A:A4:70:CC:F7:4F:52:EE:2D:70:33:90:CB:E1:7A:29
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e203332363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:93:b4:a1:7d:ed:2a:ea:83:03:4b:55:e3:5e:a9:27:71:f5:
         24:be:54:76:0b:06:fe:d9:0c:b0:83:26:27:f1:8f:b6:bf:c7:
         46:f6:d0:13:b8:cd:69:0d:14:1c:7a:4f:10:64:00:ee:66:34:
         d3:3c:19:dc:1a:8b:2e:26:31:82:79:ce:bf:65:0e:e6:83:3b:
         0b:2f:b4:37:aa:2d:b8:89:71:2e:dd:47:c9:0d:09:a3:e3:46:
         d7:02:0d:89:0c:ff:66:d3:9e:ba:c1:c8:93:20:58:2a:4f:3e:
         6e:9c:70:64:be:50:55:e0:43:4f:46:15:36:7a:51:dd:9f:58:
         ea:12:96:a9:73:09:78:cc:df:a4:1d:47:c0:bb:be:13:f0:bc:
         21:17:87:48:ab:f6:94:72:de:d7:b1:e4:49:bf:f6:72:00:47:
         c5:67:1b:de:94:81:97:63:20:d2:93:a5:96:a5:13:db:72:e3:
         2c:8b:f6:c6:a6:76:c4:f6:23:a0:e9:ad:cf:95:9c:88:6b:ec:
         58:c5:74:a1:76:5b:b7:33:59:6a:48:98:84:f9:b8:e3:b3:a8:
         a4:47:e0:c6:bb:17:6c:66:10:70:e0:0e:48:7d:82:b7:9a:76:
         59:f0:de:f7:a7:22:10:53:9f:92:13:e0:7b:08:c7:76:da:f8:
         ba:a4:c3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 04:24:46 2024 by rpki-client on console-fra.rpki-client.org